On Tue, Feb 25, 2025 at 04:24:24PM -0600, David C. Rankin wrote:
I think the new Tumbleweed has growing-pains associated with this new selinux stuff. sshd was broken after install, no firewall was opened despite the installer telling me it was after I explicitly turned it on. These look like two unrelated problems, I would not put them together. And I'm not sure they are both related to SELinux.
Now, I can't use public/private keys to access the new Tumbleweed install. I can enter a password, but public/private key auth fails with "Permission denied" ?? : To check if it is a SELinux problem, you can follow
https://en.opensuse.org/Portal:SELinux/Troubleshooting
Is there an easy way to ditch the selinux and go back to the aa? Yes, you can always select AppArmor in the installer or switch your install manually back to AppArmor.
The selinux config still seems to be 1/2 baked. I don't think that's true, things are generally working for most people and have been working on MicroOS/Aeon for years.
I can't set perms on /usr/local without them be switched back and I can't ssh into the new install to author the i915 bug to get the LSPCON/dpms/reboot issue fixed. I'm sorry you're having issues but those seem to be still entirely different problems and unrelated to SELinux.
-- Filippo Bonazzi Security Engineer suse.com 8257 4398 947A 2DBE F21D 76E6 937A 63F0 5B36 46D9